CVE-2019-17184 Privilege escalation in n/a

Critical 9.8 Published Updated

An attacker can gain elevated privileges on Xerox AtlaLink multifunction printers, requiring a software upgrade to mitigate.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
Not needed
Fix
None listed

What is CVE-2019-17184?

CVE-2019-17184 is a critical vulnerability in n/a, published on 4 Oct 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Xerox AtlaLink B8045/B8055/B8065/B8075/B8090 C8030/C8035/C8045/C8055/C8070 printers with software before 101.00x.089.22600 allow an attacker to gain privileges.

Which versions are affected by CVE-2019-17184?

It affects 1 product.

Products include Xerox Atlalink Firmware.

How do I fix CVE-2019-17184?

No fix has been published for CVE-2019-17184 yet. Limit exposure of the affected software until one is available.

Is CVE-2019-17184 being exploited?

There is no known exploitation of CVE-2019-17184 in the wild and no public exploit code.

Sources

Also known as GHSA-m8wf-6v9r-jp64.

Is CVE-2019-17184 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free